Vulnerabilities
Every vulnerability the CVE Program has published, newest first. Search by CVE ID, product, or words from the description.
398,724 vulnerabilities match.
| CVE | Severity | Summary | Published |
|---|---|---|---|
| CVE-1999-0280 | Not scored | Remote command execution in Microsoft Internet Explorer using .lnk and .url files. | Jan 4, 2000 |
| CVE-1999-0275 | Not scored | Denial of service in Windows NT DNS servers by flooding port 53 with too many characters. | Jan 4, 2000 |
| CVE-1999-0212 | Not scored | Solaris rpc.mountd generates error messages that allow a remote attacker to determine what files are on the server. | Jan 4, 2000 |
| CVE-1999-0151 | Not scored | The SATAN session key may be disclosed if the user points the web browser to other sites, possibly allowing root access. | Jan 4, 2000 |
| CVE-1999-0073 | Not scored | Telnet allows a remote client to specify environment variables including LD_LIBRARY_PATH, allowing an attacker to bypass the normal system libraries and gain root access. | Sep 29, 1999 |
| CVE-1999-0628 | Not scored | The rwho/rwhod service is running, which exposes machine status and user information. | Sep 29, 1999 |
| CVE-1999-0627 | Not scored | The rexd service is running, which uses weak authentication that can allow an attacker to execute commands. | Sep 29, 1999 |
| CVE-1999-0626 | Not scored | A version of rusers is running that exposes valid user information to any entity on the network. | Sep 29, 1999 |
| CVE-1999-0612 | Not scored | A version of finger is running that exposes valid user information to any entity on the network. | Sep 29, 1999 |
| CVE-1999-0566 | Not scored | An attacker can write to syslog files from any location, causing a denial of service by filling up the logs, and hiding activities. | Sep 29, 1999 |
| CVE-1999-0551 | Not scored | HP OpenMail can be misconfigured to allow users to run arbitrary commands using malicious print requests. | Sep 29, 1999 |
| CVE-1999-0526 | Not scored | An X server's access control is disabled (e.g. through an "xhost +" command) and allows anyone to connect to the server. | Sep 29, 1999 |
| CVE-1999-0514 | Not scored | UDP messages to broadcast addresses are allowed, allowing for a Fraggle attack that can cause a denial of service by flooding the target. | Sep 29, 1999 |
| CVE-1999-0513 | Not scored | ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service. | Sep 29, 1999 |
| CVE-1999-0496 | Not scored | A Windows NT 4.0 user can gain administrative rights by forcing NtOpenProcessToken to succeed regardless of the user's permissions, aka GetAdmin. | Sep 29, 1999 |
| CVE-1999-0494 | Not scored | Denial of service in WinGate proxy through a buffer overflow in POP3. | Sep 29, 1999 |
| CVE-1999-0487 | Not scored | The DHTML Edit ActiveX control in Internet Explorer allows remote attackers to read arbitrary files. | Sep 29, 1999 |
| CVE-1999-0485 | Not scored | Remote attackers can cause a system crash through ipintr() in ipq in OpenBSD. | Sep 29, 1999 |
| CVE-1999-0484 | Not scored | Buffer overflow in OpenBSD ping. | Sep 29, 1999 |
| CVE-1999-0483 | Not scored | OpenBSD crash using nlink value in FFS and EXT2FS filesystems. | Sep 29, 1999 |
| CVE-1999-0482 | Not scored | OpenBSD kernel crash through TSS handling, as caused by the crashme program. | Sep 29, 1999 |
| CVE-1999-0481 | Not scored | Denial of service in "poll" in OpenBSD. | Sep 29, 1999 |
| CVE-1999-0479 | Not scored | Denial of service Netscape Enterprise Server with VirtualVault on HP-UX VVOS systems. | Sep 29, 1999 |
| CVE-1999-0478 | Not scored | Denial of service in HP-UX sendmail 8.8.6 related to accepting connections. | Sep 29, 1999 |
| CVE-1999-0475 | Not scored | A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail. | Sep 29, 1999 |
| CVE-1999-0474 | Not scored | The ICQ Webserver allows remote attackers to use .. to access arbitrary files outside of the user's personal directory. | Sep 29, 1999 |
| CVE-1999-0473 | Not scored | The rsync command before rsync 2.3.1 may inadvertently change the permissions of the client's working directory to the permissions of the directory being transferred. | Sep 29, 1999 |
| CVE-1999-0472 | Not scored | The SNMP default community name "public" is not properly removed in NetApps C630 Netcache, even if the administrator tries to disable it. | Sep 29, 1999 |
| CVE-1999-0471 | Not scored | The remote proxy server in Winroute allows a remote attacker to reconfigure the proxy without authentication through the "cancel" button. | Sep 29, 1999 |
| CVE-1999-0468 | 8.2 High | Internet Explorer 5.0 allows a remote server to read arbitrary files on the client's file system using the Microsoft Scriptlet Component. | Sep 29, 1999 |
| CVE-1999-0466 | Not scored | The SVR4 /dev/wabi special device file in NetBSD 1.3.3 and earlier allows a local user to read or write arbitrary files on the disk associated with that device. | Sep 29, 1999 |
| CVE-1999-0463 | Not scored | Remote attackers can perform a denial of service using IRIX fcagent. | Sep 29, 1999 |
| CVE-1999-0458 | Not scored | L0phtcrack 2.5 used temporary files in the system TEMP directory which could contain password information. | Sep 29, 1999 |
| CVE-1999-0457 | Not scored | Linux ftpwatch program allows local users to gain root privileges. | Sep 29, 1999 |
| CVE-1999-0449 | Not scored | The ExAir sample site in IIS 4 allows remote attackers to cause a denial of service (CPU consumption) via a direct request to the (1) advsearch.asp, (2) query.asp, or (3) search.asp scripts. | Sep 29, 1999 |
| CVE-1999-0448 | Not scored | IIS 4.0 and Apache log HTTP request methods, regardless of how long they are, allowing a remote attacker to hide the URL they really request. | Sep 29, 1999 |
| CVE-1999-0447 | Not scored | Local users can gain privileges using the debug utility in the MPE/iX operating system. | Sep 29, 1999 |
| CVE-1999-0446 | Not scored | Local users can perform a denial of service in NetBSD 1.3.3 and earlier versions by creating an unusual symbolic link with the ln command, triggering a bug in VFS. | Sep 29, 1999 |
| CVE-1999-0445 | Not scored | In Cisco routers under some versions of IOS 12.0 running NAT, some packets may not be filtered by input access list filters. | Sep 29, 1999 |
| CVE-1999-0442 | Not scored | Solaris ff.core allows local users to modify files. | Sep 29, 1999 |
| CVE-1999-0441 | Not scored | Remote attackers can perform a denial of service in WinGate machines using a buffer overflow in the Winsock Redirector Service. | Sep 29, 1999 |
| CVE-1999-0438 | Not scored | Remote attackers can perform a denial of service in WebRamp systems by sending a malicious UDP packet to port 5353, changing its IP address. | Sep 29, 1999 |
| CVE-1999-0437 | Not scored | Remote attackers can perform a denial of service in WebRamp systems by sending a malicious string to the HTTP port. | Sep 29, 1999 |
| CVE-1999-0436 | Not scored | Domain Enterprise Server Management System (DESMS) in HP-UX allows local users to gain privileges. | Sep 29, 1999 |
| CVE-1999-0433 | Not scored | XFree86 startx command is vulnerable to a symlink attack, allowing local users to create files in restricted directories, possibly allowing them to gain privileges or cause a denial of service. | Sep 29, 1999 |
| CVE-1999-0432 | Not scored | ftp on HP-UX 11.00 allows local users to gain privileges. | Sep 29, 1999 |
| CVE-1999-0430 | Not scored | Cisco Catalyst LAN switches running Catalyst 5000 supervisor software allows remote attackers to perform a denial of service by forcing the supervisor module to reload. | Sep 29, 1999 |
| CVE-1999-0425 | Not scored | talkback in Netscape 4.5 allows a local user to kill an arbitrary process of another user whose Netscape crashes. | Sep 29, 1999 |
| CVE-1999-0424 | Not scored | talkback in Netscape 4.5 allows a local user to overwrite arbitrary files of another user whose Netscape crashes. | Sep 29, 1999 |
| CVE-1999-0423 | Not scored | Vulnerability in hpterm on HP-UX 10.20 allows local users to gain additional privileges. | Sep 29, 1999 |
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.